Static task
static1
Behavioral task
behavioral1
Sample
106470a78b035203c252f08ddf9055a2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
106470a78b035203c252f08ddf9055a2.exe
Resource
win10v2004-20231215-en
General
-
Target
106470a78b035203c252f08ddf9055a2
-
Size
596KB
-
MD5
106470a78b035203c252f08ddf9055a2
-
SHA1
b211bb56e3fa128f32f0e741eb3064cf368b4346
-
SHA256
7207eb72e301092b773f09059f460e6592ccc7741a1ff82fc2ea58a493887754
-
SHA512
aee07e8cf189bec4ba72574ad7368461874b9a97a49ef8da04108d20d672a5f91e0803651ff179a88062b877080c8dbb2d23094b597f2231d84419ab24bfb0f9
-
SSDEEP
12288:s5GTxbOqFHYVbRQE7e/31pb/lFReAi+Klt1jv1+g5dSmIMG7OVPB+CcX:HT9O4KHAiL59f5QmIMG7OVns
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 106470a78b035203c252f08ddf9055a2
Files
-
106470a78b035203c252f08ddf9055a2.exe windows:4 windows x86 arch:x86
9eb1f7a76dea77b0f57d7302329bc69a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
_TrackMouseEvent
CreateMappedBitmap
ImageList_Duplicate
ImageList_GetFlags
ImageList_LoadImageW
CreateUpDownControl
CreateStatusWindow
InitCommonControlsEx
ImageList_Draw
CreatePropertySheetPageA
user32
IsWindow
RegisterClassA
UnhookWindowsHookEx
GetDoubleClickTime
MenuItemFromPoint
DlgDirListComboBoxA
ReplyMessage
LoadCursorA
DdeClientTransaction
GetMenuCheckMarkDimensions
GetMessageTime
SetMenuItemInfoW
IsWindowVisible
DdeAddData
SendDlgItemMessageW
CreateWindowExW
CopyRect
ShowCursor
GetClipboardFormatNameW
GetWindowRect
EndPaint
CreateDesktopW
EnumDisplaySettingsExA
CloseDesktop
ToUnicode
ShowWindow
IntersectRect
CharUpperBuffA
LoadCursorFromFileA
SendIMEMessageExW
DdeUninitialize
GetUserObjectInformationW
IsCharUpperW
OpenWindowStationW
CharToOemBuffA
UnpackDDElParam
BringWindowToTop
GetThreadDesktop
SetScrollRange
TileWindows
GetDlgItemInt
SetClipboardData
OpenClipboard
EndTask
MessageBoxExA
IsWindowUnicode
RegisterDeviceNotificationA
CharPrevW
SetScrollPos
SetWindowRgn
BroadcastSystemMessageW
ChangeDisplaySettingsExA
SetDlgItemInt
DefDlgProcW
RegisterClassExA
DdeFreeDataHandle
EnumDesktopsW
DrawEdge
CharUpperW
CreateCaret
GetComboBoxInfo
ChangeClipboardChain
RegisterClassExW
SetMessageQueue
RegisterWindowMessageA
SetClipboardViewer
ChangeDisplaySettingsExW
GetClassNameW
DdeSetQualityOfService
UnloadKeyboardLayout
kernel32
GetShortPathNameA
GetDateFormatA
CreateRemoteThread
GetSystemTimeAsFileTime
VirtualQuery
InitializeCriticalSectionAndSpinCount
GetProcAddress
CreateMutexA
GetStdHandle
InterlockedExchange
WriteFile
SetConsoleCtrlHandler
IsValidCodePage
GetModuleHandleA
TlsAlloc
GetConsoleCP
GetLocaleInfoW
LCMapStringW
GetTimeFormatA
TlsSetValue
GetCurrentProcessId
HeapDestroy
GetEnvironmentStringsW
TerminateProcess
CreateNamedPipeA
FillConsoleOutputCharacterW
OpenMutexA
Sleep
VirtualAlloc
GetAtomNameW
GetCommandLineW
InterlockedDecrement
GetConsoleMode
VirtualFree
LoadLibraryA
ReadFile
VirtualLock
IsValidLocale
SetVolumeLabelW
EnumSystemLocalesA
ExitProcess
GetCurrentProcess
GetFileType
GetTimeZoneInformation
GetModuleHandleW
CreateEventA
SetUnhandledExceptionFilter
GetStartupInfoA
GetModuleFileNameA
LeaveCriticalSection
GetACP
FreeEnvironmentStringsW
GetOEMCP
GetUserDefaultLCID
CreateFileA
HeapSize
lstrlen
GetStringTypeA
HeapCreate
SetEnvironmentVariableA
HeapReAlloc
CompareStringW
SetStdHandle
GetModuleFileNameW
GetStringTypeW
QueryPerformanceCounter
HeapFree
GetLastError
GetVolumeInformationA
MultiByteToWideChar
GetCurrentThreadId
LCMapStringA
WriteConsoleInputW
IsDebuggerPresent
GetCurrentThread
SetFilePointer
SetHandleCount
UnhandledExceptionFilter
GetStartupInfoW
GlobalFree
CloseHandle
SetLastError
HeapAlloc
WriteConsoleW
FlushFileBuffers
GetCommandLineA
EnterCriticalSection
CompareStringA
FreeLibrary
DeleteCriticalSection
GetLocaleInfoA
GetConsoleOutputCP
InterlockedIncrement
TlsGetValue
ExpandEnvironmentStringsW
TlsFree
RtlUnwind
GetCPInfo
WriteConsoleA
GetTickCount
WideCharToMultiByte
Sections
.text Size: 188KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 248KB - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ